Your friendly neighbourhood sh.it.head

Gamer, book and photography nerd, francophile // Gamer, geek des livres et de la photographie, francophile

  • 3 Posts
  • 19 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle
  • As of now I am currently using FreshRSS, although before I properly deploy this to other users in my family / friends I might give Tiny Tiny RSS (tt-rss) a shot as well. I don’t think the differences will matter for end-users as the majority of mine will likely all be using it through the API via a mobile app (e.g NetNewsWire (ios & mac), FluentReader (desktop), CapyReader (android) etc. etc.)., however the main difference that will dictate which one I stick with is the filtering capabilities and the ease of setup of article-collection with readibility / mercury to remove extrenuous content / ads.

    I am also quite interested in miniflux, although it is quite intentionally bare bones. It lacks a plugin api (a potential security improvement), and instead natively supports many of the things people would use plugins for (native youtube-nocookie embedding / invidious embedding, integrations with readlater services like instapaper and wallabag, etc., integrated article fetching and parsing with readibility [and can change user agent / cookies to bypass bot protections]). It also seems to have a bit better security stance (supporting modern web browser features like passkeys, content sanitization, sanitizing url parameters in share links automatically etc.).

    Miniflux definitely feels like the best ratio of ootb functionality + security, but the UI of FreshRSS feels more natural if you envisage less techy users to use it (and in my case I see one person using the website over an app).


  • That is what it seems like based on what I have read :/

    I guess the best option in my case then is likely to add them as a non-admin user to my tailnet. The only concern I have is with the potential of one user deactivating the VPN connection unkowingly, which is probably where Funnel comes in as a better option, but I would prefer to avoid serving stuff on the web when possible. (It is specifically a FreshRSS instance for now)


  • Yes, there is two ways you can go about this. The way that you are thinking of (and the way that I would ideally like to go about this) is as listed on this help article. This is perfect for sharing a home server to some friends, and letting them access a given service without seeing any of your personal devices.

    The other option is to have just one tailnet, but having multiple users as detailed here. Notably this can be a security regression (if you don’t limit access on a per-user basis with ACLs), but is ideal for sharing access to your entire network with your spouse / older children within the context of self-hosting.


    For example, I have a friend who has shared a minecraft server with me and that is an ideal example of sharing one node to a seperate tailnet. I am an admin of the server, and can manage the docker container for it + the backup sidecar and the SMB share, but that is where my access to his network structure ends.

    This contrasts the situation with my partner for example, where we share a tailnet (with seperate user logins) to make things like gamestreaming just that much easier to setup. Hypothetically I can use ACLs to limit access to stuff like the Cockpit web-management portal, or block the SSH port, but I don’t feel like I need to in my specific case.


    Addendum: I also think sharing the device out strips it of its subnet routes + services, which is part of the problem I am running into where I do want it to strip subnet routing (my elderly parents DO NOT need access to my printer), but I ideally want to be able to still use tailscale serve + services + https certificates to be able to share my self-hosted RSS feed reader for them (ad-free, no AI slop, much better for my one parental figure with early-onset dementia).


    Addendum 2: I highly recommend exploring tagging + ACLs if you are looking into personal usage / seperation of networks. It is just a much easier approach of seperating devices that are owned and operated by the same person. I would only explore multi-tailnet option when it is different users and you want to share a very limited scope of your network.



  • I still think a syncthing client of some form is ideal. As someone else mentioned there is the option of using the Syncthing Tray devs experimental android build. To avoid issues with sync-conflicts / maintain high-availability access to the most recent file, I sync the databse to a raspberry pi with the encryption option selected (not that the pi is untrusted per se, but it is a device that doesn’t need access to the file, it just serves the most recent changes to other devices since often my laptop / phone / desktop are not all on at the same time).



  • One thing not mentioned, BTRFS supports transparent compression which hypothetically can increase the longevity of SSD media by reducing the amount of writes to the drive.

    I say hypothetically because further information on use case (potential write amplification from CoW) could nullify those gains — but frankly, SSD write longevity has improved so much that it is not a huge issue at this point.








  • One of the advantages of Relay is that it is agnostic of your email provider, making it easier to switch providers without having to change the email on every account that has an alias.

    Considering this, I’d be tempted to go with Addy.io instead of ProtonMail / SimpleLogin (subsidiary of Proton AG).

    If you’re concerned with having to trust a third-party to process your emails however, Proton may be the better option with built-in aliasing. Mailbox.org is another option recommended by privacy guides with built-in aliasing.

    If you’re concerned with Mozilla’s TOS change however, you may also be concerned with the Proton CEO implicitly supporting the current Trump presidency, believing that the Republicans will do a better job reigning big tech in (While I’ll agree that the democrats are not anti-corp, that died with Bernie, I think it’s foolish to believe the republicans will be better). They also pulled their entire media presence on Mastodon, and recently integrated Zoom despite explicitly stating that it has privacy issues in their blog.

    I think some people are being a bit extreme in their characterization of Proton AG right now, but it definitely feels like they’re making some peculiar choices when looking at their guiding mission of privacy / security.


  • I feel like the major one for me (that hasn’t been listed) is Ape Escape. Growing up i played the (arguably worse) remaster of it for the PSP. Genuinely interesting to play a platformer so different yet so clearly reactionary to Mario 64. And it’s also just interesting how they handle the analog sticks in terms of controls

    Like many games of the era the controls are frankly janky, but they are just so much fun





  • Whatever file format I use them in is also how I back them up, I backup my entire desktop’s and laptop’s data to an external hard drive and an online service provider. I’m sure a compressed format would be more space efficient but that would take much more time given my use case.

    In the case of my laptop it runs Linux and the filesystem I use supports “transparent compression” (almost all contents of the drive are compressed with zstd), so I’m guessing any of the ROMs on there will have already been compressed as nuch as they can (but I’m not knowledgeable enough on the file format specs)



  • Assuming the NAT type is one that supports peer to peer connectivity, you could try using Ethernet instead of wireless (of course this only helps when docked). This would alleviate issues with WiFi signal not being strong enough, potentially increase bandwidth, and reduce latency. Ethernet can’t improve the connection beyond the incoming connection from the ISP, it only will improve issues that stem from wireless connectivity.

    I live in the countryside with my family, so maybe that’s why my Internet is so wonky?

    it could very well be this, when I visit my parents in the countryside the internet is sometimes not good enough, and other times it is adequate (satellite internet, so weather can impact it).